The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A Time-of-check Time-of-use (TOCTOU) flaw was found in podman. This issue may allow a malicious user to replace a normal file in a volume with a symlink while exporting the volume, allowing for access to arbitrary files on the host file system.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-pluginsUpgrade python3-podmanUpgrade cockpit-podmanUpgrade podman-catatonitUpgrade criuUpgrade podman-dockerUpgrade toolbox-testsUpgrade runcUpgrade udicaUpgrade podman-gvproxyUpgrade critUpgrade criu-develUpgrade slirp4netnsUpgrade podman-testsUpgrade toolboxUpgrade conmonUpgrade skopeo-testsUpgrade python3-criuUpgrade container-selinuxUpgrade crunUpgrade libslirpUpgrade buildahUpgrade oci-seccomp-bpf-hookUpgrade netavarkUpgrade containers-commonUpgrade podmanUpgrade libslirp-develUpgrade aardvark-dnsUpgrade containernetworking-pluginsUpgrade criu-libsUpgrade buildah-testsUpgrade fuse-overlayfsUpgrade skopeoUpgrade podman-remote | May 23, 2023 | Mar 27, 2023 |
| Alpine Linux | — | Upgrade podman | Aug 22, 2024 | Mar 27, 2023 |
| Centos_linux | — | Upgrade netavarkUpgrade libslirp-debuginfoUpgrade crunUpgrade slirp4netnsUpgrade podman-testsUpgrade podman-gvproxyUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade python3-criuUpgrade buildah-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade criu-libs-debuginfoUpgrade skopeo-debugsourceUpgrade fuse-overlayfsUpgrade skopeoUpgrade podman-dockerUpgrade podman-remoteUpgrade conmonUpgrade containernetworking-plugins-debugsourceUpgrade udicaUpgrade buildah-testsUpgrade skopeo-debuginfoUpgrade conmon-debugsourceUpgrade runcUpgrade libslirp-debugsourceUpgrade podman-debuginfoUpgrade podman-catatonitUpgrade criuUpgrade slirp4netns-debuginfoUpgrade critUpgrade toolbox-testsUpgrade toolbox-debugsourceUpgrade conmon-debuginfoUpgrade buildahUpgrade cockpit-podmanUpgrade toolbox-debuginfoUpgrade libslirpUpgrade podmanUpgrade runc-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-pluginsUpgrade podman-remote-debuginfoUpgrade buildah-tests-debuginfoUpgrade podman-catatonit-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade fuse-overlayfs-debugsourceUpgrade crun-debugsourceUpgrade containers-commonUpgrade skopeo-testsUpgrade libslirp-develUpgrade crun-debuginfoUpgrade toolboxUpgrade runc-debugsourceUpgrade criu-debuginfoUpgrade podman-debugsourceUpgrade criu-develUpgrade containernetworking-pluginsUpgrade container-selinuxUpgrade buildah-debugsourceUpgrade aardvark-dnsUpgrade python3-podmanUpgrade podman-plugins-debuginfoUpgrade criu-libsUpgrade criu-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade slirp4netns-debugsource | May 17, 2023 | Mar 27, 2023 |
| Debian | — | Upgrade libpod | Jul 30, 2024 | Mar 27, 2023 |
| Gentoo Linux | — | Upgrade app-containers/podman. | Jul 9, 2024 | Mar 27, 2023 |
| Oracle_linux | — | Upgrade buildah-testsUpgrade criuUpgrade oci-seccomp-bpf-hookUpgrade netavarkUpgrade podman-catatonitUpgrade fuse-overlayfsUpgrade python3-criuUpgrade buildahUpgrade cockpit-podmanUpgrade podman-remoteUpgrade containers-commonUpgrade criu-libsUpgrade containernetworking-pluginsUpgrade aardvark-dnsUpgrade podmanUpgrade udicaUpgrade python3-podmanUpgrade libslirpUpgrade podman-gvproxyUpgrade skopeo-testsUpgrade podman-pluginsUpgrade slirp4netnsUpgrade crunUpgrade runcUpgrade podman-testsUpgrade criu-develUpgrade conmonUpgrade critUpgrade skopeoUpgrade container-selinuxUpgrade podman-dockerUpgrade libslirp-devel | Jul 22, 2024 | Feb 15, 2023 |
| Redhat Openshift | — | Upgrade podman | May 19, 2023 | Feb 15, 2023 |
| Redhat_linux | — | Upgrade podman-remote-debuginfoUpgrade podman-debuginfoUpgrade podman-pluginsUpgrade toolbox-debugsourceUpgrade conmon-debugsourceUpgrade podman-catatonit-debuginfoUpgrade crun-debugsourceUpgrade critUpgrade runcUpgrade libslirp-debuginfoNo solution existsUpgrade criu-libs-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade podmanUpgrade podman-catatonitUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade buildah-debuginfoUpgrade toolboxUpgrade criu-debuginfoUpgrade fuse-overlayfsUpgrade containernetworking-plugins-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade podman-remoteUpgrade skopeoUpgrade criu-debugsourceUpgrade udicaUpgrade buildah-debugsourceUpgrade containernetworking-pluginsUpgrade criuUpgrade crunUpgrade toolbox-testsUpgrade netavarkUpgrade buildahUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade skopeo-debugsourceUpgrade skopeo-debuginfoUpgrade podman-plugins-debuginfoUpgrade runc-debugsourceUpgrade crun-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade podman-testsUpgrade criu-develUpgrade containers-commonUpgrade runc-debuginfoUpgrade buildah-testsUpgrade aardvark-dnsUpgrade libslirpUpgrade toolbox-debuginfoUpgrade podman-debugsourceUpgrade conmonUpgrade containernetworking-plugins-debuginfoUpgrade container-selinuxUpgrade python3-podmanUpgrade libslirp-develUpgrade oci-seccomp-bpf-hookUpgrade podman-gvproxyUpgrade conmon-debuginfoUpgrade slirp4netns-debugsourceUpgrade podman-dockerUpgrade slirp4netnsUpgrade buildah-tests-debuginfoUpgrade criu-libsUpgrade cockpit-podmanUpgrade skopeo-testsUpgrade libslirp-debugsourceUpgrade python3-criuUpgrade slirp4netns-debuginfo | May 17, 2023 | Mar 27, 2023 |
| Rocky_linux | — | Upgrade python3-criuUpgrade criu-debugsourceUpgrade criuUpgrade libslirp-debuginfoUpgrade criu-debuginfoUpgrade libslirp-develUpgrade criu-libsUpgrade oci-seccomp-bpf-hookUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade criu-libs-debuginfoUpgrade critUpgrade criu-develUpgrade libslirpUpgrade libslirp-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfo | Dec 1, 2025 | Nov 28, 2025 |
| Suse | — | Upgrade podman-cni-configUpgrade podman-dockerUpgrade podmanUpgrade podman-remote | Apr 12, 2023 | Mar 27, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub